Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: /B4hsiffd7QHqrRwn8TzOAoWwC4pRf1rRYVdkurbP3w=
Subject key identifier: 24:90:BD:11:88:F1:12:E5:29:52:9C:50:2B:7A:41:77:0B:99:0C:22
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 01A183AC139B00FD60F583CB82638F52E739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 18:00:54 +0000
Manifest this update: Wed 28 Oct 2026 18:00:54 +0000
Manifest next update: Thu 29 Oct 2026 18:00:54 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: ymZpMbKIBqDhpaVLycI3J1iB2Ecfj0hEjcXwzzR2EY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:13:9b:00:fd:60:f5:83:cb:82:63:8f:52:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Oct 28 18:00:54 2026 GMT
Not After : Oct 29 18:00:54 2026 GMT
Subject: CN=2490bd1188f112e529529c502b7a41770b990c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fb:42:e8:d0:07:0e:2d:e5:ea:01:28:68:60:
c1:3b:d9:ba:fa:ef:41:f4:f2:9c:d8:e8:e7:e3:70:
b9:d7:1c:f2:57:af:ef:d6:38:27:0a:ab:5f:0b:e3:
53:f4:1b:10:7f:5d:5a:2e:ec:23:c9:6c:92:02:84:
2b:35:29:3f:fc:33:f4:98:3c:7c:de:02:4c:20:37:
de:48:66:ee:45:c0:8f:02:24:e5:32:c3:89:4c:4c:
50:49:48:00:5a:ab:51:cc:d3:a2:76:4e:66:ea:61:
26:9d:ec:8d:9d:f2:c5:06:e6:33:0d:f6:07:86:28:
42:e1:ce:9c:28:3b:c1:c7:7a:f4:e6:ff:8f:9a:37:
ae:a6:54:0d:85:86:85:83:7f:93:15:65:b1:b9:15:
af:a1:fa:2e:69:d9:b5:e5:fa:56:88:ab:fe:26:5d:
0a:ab:0e:70:58:e0:f0:f7:f5:2b:9c:0f:d5:85:c7:
aa:e2:5e:80:e9:1e:7d:6f:9f:aa:08:5e:78:c7:d6:
9c:a1:29:74:4c:b9:98:e2:b5:d7:2a:cf:7f:b7:ed:
b4:0c:e2:01:7b:b7:b1:7d:66:96:92:4d:a9:04:7e:
c2:bc:c0:97:b4:da:ef:fc:06:0f:68:3c:49:56:e8:
e7:14:5f:fa:f0:f0:0b:b4:3b:fa:d8:bd:cd:2e:ac:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:BD:11:88:F1:12:E5:29:52:9C:50:2B:7A:41:77:0B:99:0C:22
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c9:6a:7e:61:89:40:16:3d:ef:b0:4b:b5:a4:86:e3:58:3b:
35:1d:dd:3a:e4:de:5c:cf:69:68:e8:40:52:5e:1b:3a:79:0f:
0e:f2:97:35:ba:75:cd:85:c4:5b:f8:b1:d4:cc:0d:ba:55:23:
13:7d:12:97:68:07:04:22:f5:e6:e3:fc:db:2f:e6:53:ae:31:
dd:80:6c:8e:2f:e8:57:49:d5:fe:59:27:78:c3:5a:d2:6e:2d:
b1:04:7d:bf:a7:8f:a8:dd:53:8f:c2:3b:7f:10:21:5d:2e:eb:
bf:fb:97:28:0e:34:e2:d6:c9:45:b9:5b:ec:c3:f6:79:b8:45:
9f:b5:3e:be:3d:fb:05:41:c8:bf:96:b2:6a:45:4c:77:8a:a4:
b0:24:05:b2:4c:a5:2c:c0:03:4c:a6:34:d7:61:82:d4:53:28:
1c:d3:38:62:87:23:18:fc:f6:64:74:3b:52:0b:5a:14:19:2b:
18:a1:12:d2:24:eb:aa:a4:0b:68:7e:c1:b6:3b:9c:81:e8:44:
c4:fb:39:0a:b5:55:3c:2b:e1:a9:0b:56:c3:99:36:c7:97:52:
82:66:e1:a1:47:b3:eb:37:1d:0e:6c:15:b3:27:e4:be:5f:76:
de:ba:e5:9f:ee:6b:e5:6f:0e:44:c5:47:d5:38:0f:01:12:46:
69:ec:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:05:43 2026 by rpki-client